Hello,

Not sure who to report this to:

Working on a workstation that is using SSSD, realmd, and Kerberos to log a user into a specific Active Directory LDAP account.

sssd.conf specifies

use_fully_qualified_names = True

The relevant domain is also specified.

The correct login account has a specific domain.
The login has a user account for that LDAP domain on the workstation.

eg.  [email protected]

It appears, with the KDE desktop login, that 'someuser'    can log in even when *incorrect domain is applied*.

eg.    [email protected]

KDE allows the login and logs  [email protected]    to the account of    [email protected]  with no errors at all.

It appears, once the SSSD  domain account for 'someuser@?????????' is generated, the login simply ignores which domain is being logged into.

Is this the expected behavior?

Thanks for any info.

All the best.

P

--
kubuntu-devel mailing list
[email protected]
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/kubuntu-devel

Reply via email to